Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1CPYjoDQWbm97-nA6eiNJk9LuOk.roa
File: 1CPYjoDQWbm97-nA6eiNJk9LuOk.roa (raw, json)
Hash identifier: 5pjVLvLBk9M3cyjgfLLjcSV9EREHBdAHvk8PEif93mE=
Subject key identifier: D4:23:D8:8E:80:D0:59:B9:BD:EF:E9:C0:E9:E8:8D:26:4F:4B:B8:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185EC4094BDD31B89CF94E1BB9159EF48D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1CPYjoDQWbm97-nA6eiNJk9LuOk.roa
Signing time: Thu 26 Jan 2023 04:05:33 +0000
ROA not before: Thu 26 Jan 2023 04:05:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:ec40:72f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ec:40:94:bd:d3:1b:89:cf:94:e1:bb:91:59:ef:48:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 26 04:05:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d423d88e80d059b9bdefe9c0e9e88d264f4bb8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bf:50:8a:94:11:b2:89:1f:cf:c1:7d:5f:e7:
9b:37:92:c0:2d:92:60:db:de:e6:7b:75:6e:e0:fc:
65:2c:aa:5f:ea:8f:a9:a8:a6:73:23:d7:a0:38:82:
66:44:a6:6d:4d:0d:63:ea:ec:1f:03:d3:0f:0d:25:
9a:57:ae:86:c6:f6:d9:c5:f5:d7:d6:a8:f6:29:93:
cd:24:64:65:f4:5b:c1:d4:05:a4:84:ee:b2:db:ac:
05:2f:e9:96:02:d6:68:43:c5:45:2e:5b:cd:8b:7a:
a0:45:33:aa:f7:72:99:71:d5:37:33:91:f6:c2:6b:
ef:2e:2a:03:0e:5a:c6:25:ed:0a:5e:67:19:49:0e:
d8:c6:e5:fd:e6:07:af:07:38:c7:67:cc:49:1a:40:
e5:c0:58:1c:1b:4e:55:2b:8c:7f:77:f5:0a:9e:e5:
fd:02:35:11:f2:f3:cf:68:4b:84:17:7a:12:96:a8:
8f:9f:b4:95:85:e1:07:f9:e6:bf:4f:90:4d:ba:6f:
d9:d4:67:a2:1c:0e:b3:58:13:4d:b6:19:43:2f:7c:
a2:51:dc:d6:6e:bd:da:78:75:25:a1:16:ed:bd:69:
29:92:93:46:cf:fb:55:93:99:a4:9f:53:4c:0d:e7:
5c:00:97:64:c3:08:d1:8a:1c:36:bf:d2:36:0b:7a:
ef:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:23:D8:8E:80:D0:59:B9:BD:EF:E9:C0:E9:E8:8D:26:4F:4B:B8:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1CPYjoDQWbm97-nA6eiNJk9LuOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:f3:ca:83:97:be:d4:81:e6:67:47:5f:d7:be:53:1e:29:18:
8c:17:9b:fe:2e:9c:e4:fd:52:2c:79:4e:38:25:5c:cd:12:c7:
c0:ee:d4:19:cb:c3:25:b2:3a:f7:57:34:23:63:64:2c:9d:03:
c2:bd:fd:fd:69:cb:0e:6e:a1:09:95:14:23:70:3f:16:98:e6:
a6:9f:5d:9e:b1:3a:9a:15:88:4e:9a:b1:17:7f:a8:e0:c6:0e:
25:ff:c5:25:ee:00:27:b2:48:f7:bc:83:7f:a7:df:e6:ae:b2:
f8:6e:27:db:ae:f1:bf:4a:30:08:17:73:fa:ba:93:0d:84:34:
df:d8:53:08:b7:d8:dc:47:68:94:ae:c0:a3:7e:e1:62:3d:13:
2b:5e:e6:bb:1a:62:e4:02:b6:84:d4:f4:88:b8:85:4f:4c:ac:
ef:89:9d:75:bf:63:f4:dc:fa:d2:1c:21:ed:0b:bc:ac:6b:5f:
8d:5f:c1:9f:05:47:c2:d3:cb:7e:42:d3:f8:67:bf:ef:d7:05:
29:02:21:6a:79:f3:70:ac:e8:d7:2f:ac:a3:a3:59:e7:39:36:
f0:73:a2:b6:7c:33:10:62:b1:20:92:76:71:b7:43:d7:e7:5c:
5a:7a:ca:9e:46:99:c8:c4:4c:bf:9c:64:56:40:fb:8e:70:35:
7c:32:1a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:08:14 2025 by rpki-client